Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.mft
File:                     NscJXgRZhgU7mz6HiQNnJoN90fU.mft (raw, json)
Hash identifier:          NVuxxOZYrrbJXwd2Wq9rNnyEj7I1ryhAI3S3tmoGn9w=
Subject key identifier:   EE:10:47:32:19:EB:F5:4A:76:D5:FC:F4:79:A4:27:A8:9A:7A:E8:4E
Authority key identifier: 36:C7:09:5E:04:59:86:05:3B:9B:3E:87:89:03:67:26:83:7D:D1:F5
Certificate issuer:       /CN=36c7095e045986053b9b3e8789036726837dd1f5
Certificate serial:       01901D469E843756B0AD20BD58C2991F8E54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NscJXgRZhgU7mz6HiQNnJoN90fU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.mft
Manifest number:          ED
Signing time:             Sat 15 Jun 2024 19:01:25 +0000
Manifest this update:     Sat 15 Jun 2024 19:01:25 +0000
Manifest next update:     Sun 16 Jun 2024 19:01:25 +0000
Files and hashes:         1: NscJXgRZhgU7mz6HiQNnJoN90fU.crl (hash: gnxJ8NiPtbDPvwBmxVDF4fgeV9S68b4G2IBxM54WJMI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NscJXgRZhgU7mz6HiQNnJoN90fU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:9e:84:37:56:b0:ad:20:bd:58:c2:99:1f:8e:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36c7095e045986053b9b3e8789036726837dd1f5
        Validity
            Not Before: Jun 15 19:01:25 2024 GMT
            Not After : Jun 16 19:01:25 2024 GMT
        Subject: CN=ee10473219ebf54a76d5fcf479a427a89a7ae84e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:80:02:e9:56:18:b6:7c:69:e3:34:69:f0:16:
                    a2:88:75:ed:a0:e1:f9:79:59:0e:ee:d9:52:fc:ac:
                    23:50:8e:78:c2:36:67:42:3a:b8:2c:7d:f7:10:82:
                    89:23:83:ed:e5:80:31:a2:1a:6e:d5:5f:4d:15:9b:
                    14:ee:9b:7c:ec:9a:c7:2c:fa:03:25:53:1b:e1:84:
                    88:60:8c:b9:5a:07:b3:b5:e4:34:5c:48:1b:41:fe:
                    78:53:ff:b7:50:9e:dd:91:59:f3:e7:67:ec:15:e2:
                    a9:45:44:57:b7:b5:ab:f5:a2:5e:17:fc:02:5e:42:
                    2f:e6:62:a0:85:d0:61:fd:10:0e:0a:ac:40:b9:0c:
                    2a:9a:19:81:a9:98:71:fb:e1:3b:dd:30:ff:de:19:
                    8d:6f:74:f3:33:ed:5e:1f:7c:15:d2:e4:4f:21:fa:
                    e4:64:b3:d2:e7:72:76:1b:f7:4f:89:20:c9:1a:81:
                    8a:55:00:87:a9:a4:35:a5:4b:cc:e3:86:08:79:a6:
                    13:cf:69:8d:f6:cd:bc:5d:3f:c8:e1:1f:a9:eb:32:
                    6a:f1:38:9e:97:e9:3d:8f:0a:2e:fd:a8:fd:3c:a4:
                    c8:db:7d:52:65:9d:df:b0:7b:0c:6f:0e:ef:81:e2:
                    6d:ec:53:92:b4:55:b8:7f:98:7e:b5:cc:45:f3:14:
                    d6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:10:47:32:19:EB:F5:4A:76:D5:FC:F4:79:A4:27:A8:9A:7A:E8:4E
            X509v3 Authority Key Identifier:
                keyid:36:C7:09:5E:04:59:86:05:3B:9B:3E:87:89:03:67:26:83:7D:D1:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NscJXgRZhgU7mz6HiQNnJoN90fU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:e7:71:be:0c:35:5f:a8:79:fd:ef:f8:05:4d:3f:20:51:05:
         a9:26:f5:0c:60:c3:94:69:ac:ce:9c:c7:36:d8:da:6e:f4:71:
         ac:fb:e5:33:c6:a7:9d:6d:71:e8:54:fc:5b:a1:26:47:37:1e:
         2d:48:e9:ac:49:74:bc:40:23:bb:6c:da:6e:6f:0b:b2:08:7f:
         08:95:61:c8:c8:ea:a1:69:03:cf:f9:a6:93:62:7f:5c:71:0b:
         8c:44:b3:77:01:6c:a2:ad:04:a6:bc:e6:58:94:3b:ea:cf:46:
         23:f6:92:6f:be:d5:5c:95:7a:3b:16:48:8c:e5:3c:34:90:ac:
         b5:91:82:19:92:83:ec:41:15:df:7d:16:99:e0:50:f7:bd:e5:
         7e:bf:91:d8:82:8d:3c:02:26:8c:44:18:30:fb:6e:61:f4:0b:
         0d:89:7a:93:2e:a2:fa:49:ee:e8:c1:ad:b2:1e:7e:91:1d:3c:
         51:07:4b:55:33:69:da:b7:8f:73:64:54:88:b1:da:e0:47:d2:
         87:25:5a:99:4d:4b:ad:ed:98:37:84:50:84:91:bc:d5:21:c4:
         b3:0e:b5:90:20:4f:b1:ff:35:06:4c:49:aa:fd:59:9f:4c:c4:
         2a:6d:ef:6e:86:30:bf:69:61:9d:43:a4:e5:25:55:0a:d9:4b:
         ef:89:f7:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:18:16 2024 by rpki-client on console-ams.rpki-client.org